@skillsmith/core 2.0.2 → 2.1.0

package/dist/src/scripts/merge-skills.js

@@ -0,0 +1,411 @@
+/**
+ * Merge safe skills into the main database
+ *
+ * This script merges skills from a safe-skills.json file (security scan output)
+ * with full skill data from imported-skills.json into a SQLite database.
+ * Only adds skills that don't already exist (by repo_url).
+ *
+ * Usage:
+ *   npx tsx packages/core/src/scripts/merge-skills.ts [options]
+ *
+ * Required Arguments:
+ *   --safe-skills, -s <path>     Path to safe skills JSON (from security scan)
+ *   --imported-skills, -i <path> Path to imported skills JSON (full skill data)
+ *   --database, -d <path>        Path to target SQLite database
+ *
+ * Options:
+ *   --dry-run, -n                Preview changes without modifying database
+ *   --verbose, -v                Show detailed per-skill output
+ *   --help, -h                   Show usage information
+ *
+ * Example:
+ *   npx tsx packages/core/src/scripts/merge-skills.ts \
+ *     -s data/safe-skills.json \
+ *     -i data/imported-skills.json \
+ *     -d data/skills.db \
+ *     --dry-run
+ */
+import Database from 'better-sqlite3';
+import { existsSync, readFileSync } from 'fs';
+import { resolve } from 'path';
+// ============================================================================
+// Argument Parsing
+// ============================================================================
+function printUsage() {
+    console.log(`
+Merge Safe Skills - Database Merge Tool
+
+Usage:
+  npx tsx packages/core/src/scripts/merge-skills.ts [options]
+
+Required Arguments:
+  --safe-skills, -s <path>     Path to safe skills JSON (from security scan)
+  --imported-skills, -i <path> Path to imported skills JSON (full skill data)
+  --database, -d <path>        Path to target SQLite database
+
+Options:
+  --dry-run, -n                Preview changes without modifying database
+  --verbose, -v                Show detailed per-skill output
+  --help, -h                   Show usage information
+
+Example:
+  npx tsx packages/core/src/scripts/merge-skills.ts \\
+    -s data/safe-skills.json \\
+    -i data/imported-skills.json \\
+    -d data/skills.db \\
+    --dry-run
+`);
+}
+function parseArgs(args) {
+    const options = {
+        safeSkillsPath: '',
+        importedSkillsPath: '',
+        databasePath: '',
+        dryRun: false,
+        verbose: false,
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        const nextArg = args[i + 1];
+        switch (arg) {
+            case '--help':
+            case '-h':
+                printUsage();
+                process.exit(0);
+                break;
+            case '--safe-skills':
+            case '-s':
+                if (!nextArg || nextArg.startsWith('-')) {
+                    console.error('Error: --safe-skills requires a path argument');
+                    return null;
+                }
+                options.safeSkillsPath = nextArg;
+                i++;
+                break;
+            case '--imported-skills':
+            case '-i':
+                if (!nextArg || nextArg.startsWith('-')) {
+                    console.error('Error: --imported-skills requires a path argument');
+                    return null;
+                }
+                options.importedSkillsPath = nextArg;
+                i++;
+                break;
+            case '--database':
+            case '-d':
+                if (!nextArg || nextArg.startsWith('-')) {
+                    console.error('Error: --database requires a path argument');
+                    return null;
+                }
+                options.databasePath = nextArg;
+                i++;
+                break;
+            case '--dry-run':
+            case '-n':
+                options.dryRun = true;
+                break;
+            case '--verbose':
+            case '-v':
+                options.verbose = true;
+                break;
+            default:
+                if (arg.startsWith('-')) {
+                    console.error(`Error: Unknown option: ${arg}`);
+                    printUsage();
+                    return null;
+                }
+        }
+    }
+    // Validate required arguments
+    const missing = [];
+    if (!options.safeSkillsPath)
+        missing.push('--safe-skills (-s)');
+    if (!options.importedSkillsPath)
+        missing.push('--imported-skills (-i)');
+    if (!options.databasePath)
+        missing.push('--database (-d)');
+    if (missing.length > 0) {
+        console.error(`Error: Missing required arguments: ${missing.join(', ')}`);
+        printUsage();
+        return null;
+    }
+    return options;
+}
+// ============================================================================
+// File Validation
+// ============================================================================
+function validateFiles(options) {
+    let valid = true;
+    if (!existsSync(options.safeSkillsPath)) {
+        console.error(`Error: Safe skills file not found: ${options.safeSkillsPath}`);
+        valid = false;
+    }
+    if (!existsSync(options.importedSkillsPath)) {
+        console.error(`Error: Imported skills file not found: ${options.importedSkillsPath}`);
+        valid = false;
+    }
+    if (!existsSync(options.databasePath)) {
+        console.error(`Error: Database file not found: ${options.databasePath}`);
+        valid = false;
+    }
+    return valid;
+}
+// ============================================================================
+// JSON Parsing with Error Handling
+// ============================================================================
+function parseJsonFile(path, description) {
+    try {
+        const content = readFileSync(path, 'utf-8');
+        return JSON.parse(content);
+    }
+    catch (error) {
+        if (error instanceof SyntaxError) {
+            console.error(`Error: Invalid JSON in ${description}: ${error.message}`);
+        }
+        else {
+            console.error(`Error: Failed to read ${description}: ${error}`);
+        }
+        return null;
+    }
+}
+// ============================================================================
+// Main Merge Logic
+// ============================================================================
+export async function mergeSkills(options) {
+    const startTime = Date.now();
+    const report = {
+        success: false,
+        timestamp: new Date().toISOString(),
+        options: {
+            ...options,
+            safeSkillsPath: resolve(options.safeSkillsPath),
+            importedSkillsPath: resolve(options.importedSkillsPath),
+            databasePath: resolve(options.databasePath),
+        },
+        stats: {
+            safeSkillsLoaded: 0,
+            importedSkillsLoaded: 0,
+            skillsWithFullData: 0,
+            existingInDatabase: 0,
+            newSkillsAdded: 0,
+            skippedDuplicates: 0,
+            errors: 0,
+        },
+        errors: [],
+        duration: 0,
+    };
+    const modeLabel = options.dryRun ? '[DRY-RUN]' : '[MERGE]';
+    try {
+        // ========================================================================
+        // Load Safe Skills
+        // ========================================================================
+        console.log(`${modeLabel} Loading safe skills from: ${options.safeSkillsPath}`);
+        const safeSkillsData = parseJsonFile(options.safeSkillsPath, 'safe skills file');
+        if (!safeSkillsData) {
+            throw new Error('Failed to parse safe skills file');
+        }
+        const safeRefs = safeSkillsData.skills || safeSkillsData;
+        if (!Array.isArray(safeRefs)) {
+            throw new Error('Safe skills file must contain a "skills" array or be an array');
+        }
+        const safeIds = new Set(safeRefs.map((s) => s.skillId));
+        report.stats.safeSkillsLoaded = safeIds.size;
+        console.log(`${modeLabel} Safe skill IDs loaded: ${safeIds.size}`);
+        // ========================================================================
+        // Load Imported Skills
+        // ========================================================================
+        console.log(`${modeLabel} Loading imported skills from: ${options.importedSkillsPath}`);
+        const importedData = parseJsonFile(options.importedSkillsPath, 'imported skills file');
+        if (!importedData) {
+            throw new Error('Failed to parse imported skills file');
+        }
+        const allSkills = importedData.skills || importedData;
+        if (!Array.isArray(allSkills)) {
+            throw new Error('Imported skills file must contain a "skills" array or be an array');
+        }
+        report.stats.importedSkillsLoaded = allSkills.length;
+        console.log(`${modeLabel} Total imported skills: ${allSkills.length}`);
+        // ========================================================================
+        // Filter to Safe Skills with Full Data
+        // ========================================================================
+        const safeSkills = allSkills.filter((s) => safeIds.has(s.id || ''));
+        report.stats.skillsWithFullData = safeSkills.length;
+        console.log(`${modeLabel} Safe skills with full data: ${safeSkills.length}`);
+        if (safeSkills.length === 0) {
+            console.warn(`${modeLabel} Warning: No skills matched between safe list and imported data`);
+        }
+        // ========================================================================
+        // Open Database and Get Existing Skills
+        // ========================================================================
+        console.log(`${modeLabel} Opening database: ${options.databasePath}`);
+        const db = new Database(options.databasePath, {
+            readonly: options.dryRun,
+        });
+        // Get existing repo URLs to avoid duplicates
+        const existingRows = db
+            .prepare('SELECT repo_url FROM skills WHERE repo_url IS NOT NULL')
+            .all();
+        const existingUrls = new Set(existingRows.map((row) => row.repo_url?.toLowerCase()));
+        report.stats.existingInDatabase = existingUrls.size;
+        console.log(`${modeLabel} Existing skills in database: ${existingUrls.size}`);
+        // ========================================================================
+        // Prepare Insert (if not dry-run)
+        // ========================================================================
+        let insert = null;
+        if (!options.dryRun) {
+            insert = db.prepare(`
+        INSERT OR IGNORE INTO skills (id, name, description, author, repo_url, quality_score, trust_tier, tags, source, stars, created_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+      `);
+        }
+        // ========================================================================
+        // Process Skills in Batches
+        // ========================================================================
+        const batchSize = 500;
+        let newCount = 0;
+        let skippedCount = 0;
+        const totalBatches = Math.ceil(safeSkills.length / batchSize);
+        console.log(`${modeLabel} Processing ${safeSkills.length} skills in ${totalBatches} batches...`);
+        const processSkills = options.dryRun
+            ? () => {
+                // Dry-run: just count what would happen
+                for (const skill of safeSkills) {
+                    const repoUrl = (skill.repo_url || skill.repoUrl)?.toLowerCase();
+                    if (repoUrl && !existingUrls.has(repoUrl)) {
+                        newCount++;
+                        if (options.verbose) {
+                            console.log(`  [WOULD ADD] ${skill.name} (${skill.author || 'unknown'})`);
+                        }
+                    }
+                    else {
+                        skippedCount++;
+                        if (options.verbose) {
+                            console.log(`  [WOULD SKIP] ${skill.name} (duplicate)`);
+                        }
+                    }
+                }
+            }
+            : db.transaction(() => {
+                // Real merge: insert skills in batches
+                for (let batchIndex = 0; batchIndex < totalBatches; batchIndex++) {
+                    const start = batchIndex * batchSize;
+                    const end = Math.min(start + batchSize, safeSkills.length);
+                    const batch = safeSkills.slice(start, end);
+                    let batchNew = 0;
+                    let batchSkipped = 0;
+                    for (const skill of batch) {
+                        const repoUrl = (skill.repo_url || skill.repoUrl)?.toLowerCase();
+                        if (repoUrl && !existingUrls.has(repoUrl)) {
+                            try {
+                                insert.run(skill.id || 'github/' + (skill.author || 'unknown') + '/' + skill.name, skill.name, skill.description || null, skill.author || null, skill.repo_url || skill.repoUrl || null, skill.quality_score ?? skill.qualityScore ?? 0.5, skill.trust_tier ?? skill.trustTier ?? 'community', JSON.stringify(skill.tags || []), skill.source || 'github', skill.stars || 0, skill.created_at || new Date().toISOString());
+                                newCount++;
+                                batchNew++;
+                                existingUrls.add(repoUrl); // Prevent duplicates within same run
+                                if (options.verbose) {
+                                    console.log(`  [ADDED] ${skill.name} (${skill.author || 'unknown'})`);
+                                }
+                            }
+                            catch (error) {
+                                report.errors.push({
+                                    skillId: skill.id || skill.name,
+                                    error: error instanceof Error ? error.message : String(error),
+                                });
+                                report.stats.errors++;
+                            }
+                        }
+                        else {
+                            skippedCount++;
+                            batchSkipped++;
+                            if (options.verbose) {
+                                console.log(`  [SKIPPED] ${skill.name} (duplicate)`);
+                            }
+                        }
+                    }
+                    console.log(`${modeLabel} Batch ${batchIndex + 1}/${totalBatches}: ${batchNew} added, ${batchSkipped} skipped`);
+                }
+            });
+        processSkills();
+        report.stats.newSkillsAdded = newCount;
+        report.stats.skippedDuplicates = skippedCount;
+        // ========================================================================
+        // Get Final Database Count
+        // ========================================================================
+        const finalCount = db.prepare('SELECT COUNT(*) as count FROM skills').get();
+        // Close database
+        db.close();
+        // Calculate duration
+        report.duration = Date.now() - startTime;
+        report.success = report.stats.errors === 0;
+        // ========================================================================
+        // Print Summary
+        // ========================================================================
+        console.log('');
+        console.log('='.repeat(50));
+        console.log(options.dryRun ? '  DRY-RUN SUMMARY (no changes made)' : '  MERGE SUMMARY');
+        console.log('='.repeat(50));
+        console.log(`  Safe skills loaded:      ${report.stats.safeSkillsLoaded}`);
+        console.log(`  Imported skills loaded:  ${report.stats.importedSkillsLoaded}`);
+        console.log(`  Skills with full data:   ${report.stats.skillsWithFullData}`);
+        console.log(`  Existing in database:    ${report.stats.existingInDatabase}`);
+        console.log(`  ${options.dryRun ? 'Would add' : 'New skills added'}:        ${report.stats.newSkillsAdded}`);
+        console.log(`  ${options.dryRun ? 'Would skip' : 'Skipped (duplicates)'}:    ${report.stats.skippedDuplicates}`);
+        console.log(`  Errors:                  ${report.stats.errors}`);
+        console.log(`  Duration:                ${(report.duration / 1000).toFixed(2)}s`);
+        if (!options.dryRun) {
+            console.log(`  Final skill count:       ${finalCount.count}`);
+        }
+        console.log('='.repeat(50));
+        if (report.errors.length > 0) {
+            console.log('');
+            console.log(`Errors (${report.errors.length}):`);
+            report.errors.slice(0, 10).forEach((e) => console.log(`  - ${e.skillId}: ${e.error}`));
+            if (report.errors.length > 10) {
+                console.log(`  ... and ${report.errors.length - 10} more`);
+            }
+        }
+        console.log('');
+        console.log(`${modeLabel} ${options.dryRun ? 'Dry run complete!' : 'Merge complete!'}`);
+    }
+    catch (error) {
+        report.errors.push({
+            skillId: 'N/A',
+            error: error instanceof Error ? error.message : String(error),
+        });
+        report.stats.errors++;
+        report.duration = Date.now() - startTime;
+        console.error(`${modeLabel} Merge failed:`, error);
+    }
+    return report;
+}
+// ============================================================================
+// Main Entry Point
+// ============================================================================
+async function main() {
+    const args = process.argv.slice(2);
+    // Handle no arguments
+    if (args.length === 0) {
+        printUsage();
+        process.exit(1);
+    }
+    // Parse arguments
+    const options = parseArgs(args);
+    if (!options) {
+        process.exit(1);
+    }
+    // Validate files exist
+    if (!validateFiles(options)) {
+        process.exit(1);
+    }
+    // Run merge
+    const report = await mergeSkills(options);
+    // Exit with appropriate code
+    process.exit(report.success ? 0 : 1);
+}
+// Run if executed directly
+if (import.meta.url === `file://${process.argv[1]}`) {
+    main().catch((error) => {
+        console.error('Fatal error:', error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=merge-skills.js.map

package/dist/src/scripts/merge-skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge-skills.js","sourceRoot":"","sources":["../../../src/scripts/merge-skills.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AACrC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AA8E9B,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;CAsBb,CAAC,CAAA;AACF,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAAiB;QAC5B,cAAc,EAAE,EAAE;QAClB,kBAAkB,EAAE,EAAE;QACtB,YAAY,EAAE,EAAE;QAChB,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK;KACf,CAAA;IAED,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QAE3B,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,UAAU,EAAE,CAAA;gBACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACf,MAAK;YAEP,KAAK,eAAe,CAAC;YACrB,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAA;oBAC9D,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,CAAC,cAAc,GAAG,OAAO,CAAA;gBAChC,CAAC,EAAE,CAAA;gBACH,MAAK;YAEP,KAAK,mBAAmB,CAAC;YACzB,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAA;oBAClE,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,CAAC,kBAAkB,GAAG,OAAO,CAAA;gBACpC,CAAC,EAAE,CAAA;gBACH,MAAK;YAEP,KAAK,YAAY,CAAC;YAClB,KAAK,IAAI;gBACP,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxC,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAA;oBAC3D,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,OAAO,CAAC,YAAY,GAAG,OAAO,CAAA;gBAC9B,CAAC,EAAE,CAAA;gBACH,MAAK;YAEP,KAAK,WAAW,CAAC;YACjB,KAAK,IAAI;gBACP,OAAO,CAAC,MAAM,GAAG,IAAI,CAAA;gBACrB,MAAK;YAEP,KAAK,WAAW,CAAC;YACjB,KAAK,IAAI;gBACP,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;gBACtB,MAAK;YAEP;gBACE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACxB,OAAO,CAAC,KAAK,CAAC,0BAA0B,GAAG,EAAE,CAAC,CAAA;oBAC9C,UAAU,EAAE,CAAA;oBACZ,OAAO,IAAI,CAAA;gBACb,CAAC;QACL,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IAC/D,IAAI,CAAC,OAAO,CAAC,kBAAkB;QAAE,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAA;IACvE,IAAI,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAE1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,sCAAsC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACzE,UAAU,EAAE,CAAA;QACZ,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,SAAS,aAAa,CAAC,OAAqB;IAC1C,IAAI,KAAK,GAAG,IAAI,CAAA;IAEhB,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QACxC,OAAO,CAAC,KAAK,CAAC,sCAAsC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QAC7E,KAAK,GAAG,KAAK,CAAA;IACf,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,KAAK,CAAC,0CAA0C,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;QACrF,KAAK,GAAG,KAAK,CAAA;IACf,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,mCAAmC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QACxE,KAAK,GAAG,KAAK,CAAA;IACf,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC;AAED,+EAA+E;AAC/E,mCAAmC;AACnC,+EAA+E;AAE/E,SAAS,aAAa,CAAI,IAAY,EAAE,WAAmB;IACzD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAM,CAAA;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,CAAC,KAAK,CAAC,0BAA0B,WAAW,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;QAC1E,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,yBAAyB,WAAW,KAAK,KAAK,EAAE,CAAC,CAAA;QACjE,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC5B,MAAM,MAAM,GAAgB;QAC1B,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE;YACP,GAAG,OAAO;YACV,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC;YAC/C,kBAAkB,EAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC;YACvD,YAAY,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;SAC5C;QACD,KAAK,EAAE;YACL,gBAAgB,EAAE,CAAC;YACnB,oBAAoB,EAAE,CAAC;YACvB,kBAAkB,EAAE,CAAC;YACrB,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,CAAC;YACjB,iBAAiB,EAAE,CAAC;YACpB,MAAM,EAAE,CAAC;SACV;QACD,MAAM,EAAE,EAAE;QACV,QAAQ,EAAE,CAAC;KACZ,CAAA;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAA;IAE1D,IAAI,CAAC;QACH,2EAA2E;QAC3E,mBAAmB;QACnB,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,8BAA8B,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QAE/E,MAAM,cAAc,GAAG,aAAa,CAAiB,OAAO,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAA;QAChG,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACrD,CAAC;QAED,MAAM,QAAQ,GACZ,cAAc,CAAC,MAAM,IAAK,cAA4C,CAAA;QACxE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;QAClF,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAA;QAC5C,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,2BAA2B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAElE,2EAA2E;QAC3E,uBAAuB;QACvB,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,kCAAkC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAEvF,MAAM,YAAY,GAAG,aAAa,CAChC,OAAO,CAAC,kBAAkB,EAC1B,sBAAsB,CACvB,CAAA;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;QACzD,CAAC;QAED,MAAM,SAAS,GAAY,YAAY,CAAC,MAAM,IAAK,YAAmC,CAAA;QACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;QACtF,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAA;QACpD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,2BAA2B,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;QAEtE,2EAA2E;QAC3E,uCAAuC;QACvC,2EAA2E;QAC3E,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACnE,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAA;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,gCAAgC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAE5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,iEAAiE,CAAC,CAAA;QAC7F,CAAC;QAED,2EAA2E;QAC3E,wCAAwC;QACxC,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,sBAAsB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;QAErE,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE;YAC5C,QAAQ,EAAE,OAAO,CAAC,MAAM;SACzB,CAAC,CAAA;QAEF,6CAA6C;QAC7C,MAAM,YAAY,GAAG,EAAE;aACpB,OAAO,CAAC,wDAAwD,CAAC;aACjE,GAAG,EAA4B,CAAA;QAClC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA;QACpF,MAAM,CAAC,KAAK,CAAC,kBAAkB,GAAG,YAAY,CAAC,IAAI,CAAA;QACnD,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,iCAAiC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAA;QAE7E,2EAA2E;QAC3E,kCAAkC;QAClC,2EAA2E;QAC3E,IAAI,MAAM,GAA8B,IAAI,CAAA;QAC5C,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;OAGnB,CAAC,CAAA;QACJ,CAAC;QAED,2EAA2E;QAC3E,4BAA4B;QAC5B,2EAA2E;QAC3E,MAAM,SAAS,GAAG,GAAG,CAAA;QACrB,IAAI,QAAQ,GAAG,CAAC,CAAA;QAChB,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,SAAS,CAAC,CAAA;QAE7D,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,eAAe,UAAU,CAAC,MAAM,cAAc,YAAY,aAAa,CAAC,CAAA;QAEhG,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;YAClC,CAAC,CAAC,GAAG,EAAE;gBACH,wCAAwC;gBACxC,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;oBAChE,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC1C,QAAQ,EAAE,CAAA;wBACV,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;4BACpB,OAAO,CAAC,GAAG,CAAC,iBAAiB,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAA;wBAC3E,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,YAAY,EAAE,CAAA;wBACd,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;4BACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,CAAC,IAAI,cAAc,CAAC,CAAA;wBACzD,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YACH,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClB,uCAAuC;gBACvC,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,YAAY,EAAE,UAAU,EAAE,EAAE,CAAC;oBACjE,MAAM,KAAK,GAAG,UAAU,GAAG,SAAS,CAAA;oBACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,CAAA;oBAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;oBAC1C,IAAI,QAAQ,GAAG,CAAC,CAAA;oBAChB,IAAI,YAAY,GAAG,CAAC,CAAA;oBAEpB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;wBAC1B,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,CAAA;wBAEhE,IAAI,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;4BAC1C,IAAI,CAAC;gCACH,MAAO,CAAC,GAAG,CACT,KAAK,CAAC,EAAE,IAAI,SAAS,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,EACtE,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,WAAW,IAAI,IAAI,EACzB,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI,EACvC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,YAAY,IAAI,GAAG,EAChD,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,IAAI,WAAW,EAClD,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,EAChC,KAAK,CAAC,MAAM,IAAI,QAAQ,EACxB,KAAK,CAAC,KAAK,IAAI,CAAC,EAChB,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAC7C,CAAA;gCACD,QAAQ,EAAE,CAAA;gCACV,QAAQ,EAAE,CAAA;gCACV,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA,CAAC,qCAAqC;gCAE/D,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;oCACpB,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,SAAS,GAAG,CAAC,CAAA;gCACvE,CAAC;4BACH,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;oCACjB,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,IAAI;oCAC/B,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iCAC9D,CAAC,CAAA;gCACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAA;4BACvB,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,YAAY,EAAE,CAAA;4BACd,YAAY,EAAE,CAAA;4BACd,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;gCACpB,OAAO,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC,IAAI,cAAc,CAAC,CAAA;4BACtD,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,UAAU,UAAU,GAAG,CAAC,IAAI,YAAY,KAAK,QAAQ,WAAW,YAAY,UAAU,CACnG,CAAA;gBACH,CAAC;YACH,CAAC,CAAC,CAAA;QAEN,aAAa,EAAE,CAAA;QAEf,MAAM,CAAC,KAAK,CAAC,cAAc,GAAG,QAAQ,CAAA;QACtC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,YAAY,CAAA;QAE7C,2EAA2E;QAC3E,2BAA2B;QAC3B,2EAA2E;QAC3E,MAAM,UAAU,GAAG,EAAE,CAAC,OAAO,CAAC,sCAAsC,CAAC,CAAC,GAAG,EAAuB,CAAA;QAEhG,iBAAiB;QACjB,EAAE,CAAC,KAAK,EAAE,CAAA;QAEV,qBAAqB;QACrB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACxC,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAA;QAE1C,2EAA2E;QAC3E,gBAAgB;QAChB,2EAA2E;QAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAA;QACvF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAC3B,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAA;QAC1E,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAA;QAC9E,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAC5E,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAA;QAC5E,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,YAAY,MAAM,CAAC,KAAK,CAAC,cAAc,EAAE,CAChG,CAAA;QACD,OAAO,CAAC,GAAG,CACT,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,sBAAsB,QAAQ,MAAM,CAAC,KAAK,CAAC,iBAAiB,EAAE,CACpG,CAAA;QACD,OAAO,CAAC,GAAG,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;QAChE,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjF,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,8BAA8B,UAAU,CAAC,KAAK,EAAE,CAAC,CAAA;QAC/D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAE3B,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,CAAA;YAChD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACtF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACf,OAAO,CAAC,GAAG,CAAC,GAAG,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAA;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACjB,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAA;QACrB,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACxC,OAAO,CAAC,KAAK,CAAC,GAAG,SAAS,gBAAgB,EAAE,KAAK,CAAC,CAAA;IACpD,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC;AAED,+EAA+E;AAC/E,mBAAmB;AACnB,+EAA+E;AAE/E,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAElC,sBAAsB;IACtB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,UAAU,EAAE,CAAA;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,kBAAkB;IAClB,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,YAAY;IACZ,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAA;IAEzC,6BAA6B;IAC7B,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,2BAA2B;AAC3B,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACpD,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAA;QACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/src/scripts/skill-scanner/index.d.ts

@@ -1,11 +1,18 @@
 /**
  * SMI-864: Security Scanner for Imported Skills
  * SMI-1189: Refactored into modular structure
+ * SMI-XXX: Improved output format with progress bars, tables, and JSON support
  *
  * Scans all skills from imported-skills.json for security vulnerabilities
  * and categorizes them by severity level.
  *
- * Usage: npx tsx packages/core/src/scripts/skill-scanner/index.ts [path-to-imported-skills.json]
+ * Usage: npx tsx packages/core/src/scripts/skill-scanner/index.ts [options] [path-to-imported-skills.json]
+ *
+ * Options:
+ *   --json      Output results in JSON format (machine-readable, CI-friendly)
+ *   --verbose   Show detailed output including all findings
+ *   --quiet     Minimal output (only errors and final summary)
+ *   --help      Show this help message
  *
  * Output Files:
  * - data/security-report.json: Full security report with all findings
@@ -18,5 +25,5 @@ export * from './trust-scorer.js';
 export * from './file-scanner.js';
 export * from './logger.js';
 export * from './reporter.js';
-export { scanImportedSkills, DEFAULT_CONFIG } from './scanner.js';
+export { scanImportedSkills, DEFAULT_CONFIG, DEFAULT_CLI_OPTIONS } from './scanner.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/scripts/skill-scanner/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAMH,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA"}

package/dist/src/scripts/skill-scanner/index.js

@@ -1,11 +1,18 @@
 /**
  * SMI-864: Security Scanner for Imported Skills
  * SMI-1189: Refactored into modular structure
+ * SMI-XXX: Improved output format with progress bars, tables, and JSON support
  *
  * Scans all skills from imported-skills.json for security vulnerabilities
  * and categorizes them by severity level.
  *
- * Usage: npx tsx packages/core/src/scripts/skill-scanner/index.ts [path-to-imported-skills.json]
+ * Usage: npx tsx packages/core/src/scripts/skill-scanner/index.ts [options] [path-to-imported-skills.json]
+ *
+ * Options:
+ *   --json      Output results in JSON format (machine-readable, CI-friendly)
+ *   --verbose   Show detailed output including all findings
+ *   --quiet     Minimal output (only errors and final summary)
+ *   --help      Show this help message
  *
  * Output Files:
  * - data/security-report.json: Full security report with all findings
@@ -20,19 +27,103 @@ export * from './trust-scorer.js';
 export * from './file-scanner.js';
 export * from './logger.js';
 export * from './reporter.js';
-export { scanImportedSkills, DEFAULT_CONFIG } from './scanner.js';
+export { scanImportedSkills, DEFAULT_CONFIG, DEFAULT_CLI_OPTIONS } from './scanner.js';
+/**
+ * Parse command line arguments
+ *
+ * @param args - Command line arguments (process.argv.slice(2))
+ * @returns Parsed CLI options and input path
+ */
+function parseArgs(args) {
+    const options = {};
+    let inputPath = DEFAULT_CONFIG.defaultInput;
+    for (const arg of args) {
+        if (arg === '--json') {
+            options.json = true;
+        }
+        else if (arg === '--verbose' || arg === '-v') {
+            options.verbose = true;
+        }
+        else if (arg === '--quiet' || arg === '-q') {
+            options.quiet = true;
+        }
+        else if (arg === '--help' || arg === '-h') {
+            printHelp();
+            process.exit(0);
+        }
+        else if (!arg.startsWith('-')) {
+            inputPath = arg;
+        }
+        else {
+            console.error(`Unknown option: ${arg}`);
+            console.error('Use --help for usage information');
+            process.exit(1);
+        }
+    }
+    // Validate conflicting options
+    if (options.verbose && options.quiet) {
+        console.error('Error: --verbose and --quiet cannot be used together');
+        process.exit(1);
+    }
+    return { options, inputPath };
+}
+/**
+ * Print help message
+ */
+function printHelp() {
+    console.log(`
+Skillsmith Security Scanner
+
+Usage: npx tsx packages/core/src/scripts/scan-imported-skills.ts [options] [input-file]
+
+Options:
+  --json      Output results in JSON format (machine-readable, CI-friendly)
+  --verbose   Show detailed output including all findings
+  --quiet     Minimal output (only errors and final summary)
+  --help, -h  Show this help message
+
+Arguments:
+  input-file  Path to imported-skills.json (default: ./data/imported-skills.json)
+
+Examples:
+  # Basic scan with human-readable output
+  npx tsx packages/core/src/scripts/scan-imported-skills.ts
+
+  # JSON output for CI pipelines
+  npx tsx packages/core/src/scripts/scan-imported-skills.ts --json
+
+  # Scan specific file
+  npx tsx packages/core/src/scripts/scan-imported-skills.ts ./custom-skills.json
+
+  # JSON output to file
+  npx tsx packages/core/src/scripts/scan-imported-skills.ts --json > results.json
+
+Output Files:
+  - data/security-report.json     Full security report with all findings
+  - data/quarantine-skills.json   Skills with HIGH/CRITICAL findings (blocked)
+  - data/safe-skills.json         Skills approved for import (passed security scan)
+`);
+}
 /**
  * CLI entry point
  */
 async function main() {
-    // Get input file from command line args or use default
-    const inputPath = process.argv[2] || DEFAULT_CONFIG.defaultInput;
+    const args = process.argv.slice(2);
+    const { options, inputPath } = parseArgs(args);
     try {
-        await scanImportedSkills(inputPath);
+        await scanImportedSkills(inputPath, DEFAULT_CONFIG, options);
     }
     catch (error) {
-        console.error('Fatal error:', error.message);
-        console.error(error.stack);
+        if (options.json) {
+            console.log(JSON.stringify({
+                success: false,
+                error: error.message,
+            }));
+        }
+        else {
+            console.error('Fatal error:', error.message);
+            console.error(error.stack);
+        }
         process.exit(1);
     }
 }

package/dist/src/scripts/skill-scanner/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEjE,2CAA2C;AAC3C,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAEjE;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,uDAAuD;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,YAAY,CAAA;IAEhE,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACrC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,cAAc,EAAG,KAAe,CAAC,OAAO,CAAC,CAAA;QACvD,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,KAAK,CAAC,CAAA;QACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/scripts/skill-scanner/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAGjE,2CAA2C;AAC3C,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,mBAAmB,CAAA;AACjC,cAAc,mBAAmB,CAAA;AACjC,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAEtF;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,OAAO,GAA+B,EAAE,CAAA;IAC9C,IAAI,SAAS,GAAG,cAAc,CAAC,YAAY,CAAA;IAE3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,OAAO,CAAC,IAAI,GAAG,IAAI,CAAA;QACrB,CAAC;aAAM,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,OAAO,GAAG,IAAI,CAAA;QACxB,CAAC;aAAM,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC7C,OAAO,CAAC,KAAK,GAAG,IAAI,CAAA;QACtB,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC5C,SAAS,EAAE,CAAA;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,SAAS,GAAG,GAAG,CAAA;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAA;YACvC,OAAO,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAA;YACjD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AAC/B,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+Bb,CAAC,CAAA;AACF,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAA;IAE9C,IAAI,CAAC;QACH,MAAM,kBAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CAAC;gBACb,OAAO,EAAE,KAAK;gBACd,KAAK,EAAG,KAAe,CAAC,OAAO;aAChC,CAAC,CACH,CAAA;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,cAAc,EAAG,KAAe,CAAC,OAAO,CAAC,CAAA;YACvD,OAAO,CAAC,KAAK,CAAE,KAAe,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAA;IACxC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACjB,CAAC,CAAC,CAAA"}